OpenID support?

[ecampbell]

Are there any plans to support OpenID authentication in Mantis?

[vboctor]

Several people have implemented integrations of Mantis authentications with lots of other systems. There is no plans to do it by the core team, but I am sure someone will do it and share it with the rest of the community.

[damnian]

How about integrating OpenID into these forums?

[vboctor]

I am trying to learn more about Open Id. I have to admit that I have some interest in it. The question is the amount of work involved in moving over the forum, adding support to Mantis itself, phpWebnotes, etc.

I can see you are the author of the phpBB plugin for it. Maybe you can educate us on what is involved with the move and the php libraries you recommend. I saw more than one php library.

Is open-id more/less secure than normal registrations as far as spam is concerned?

If users use open-id to access an application, can the application requests certain information about the user logging in? For example, email address? Is there a list of such fields that can be requested by the website consuming the open id?

[damnian]

Maybe you can educate us on what is involved with the move and the php libraries you recommend.

A phpBB installation with EasyMOD takes 3 clicks.

phpbb-openid uses a fork of JanRain's library (being the one who forked it, I recommend it, of course ).

Is open-id more/less secure than normal registrations as far as spam is concerned?

OpenID is spam-safe at the moment, but expect that to change soon. Whatever means there are in place to ensure your registrant is human (e.g. email verification) could be applied to OpenID users just as well.

If users use open-id to access an application, can the application requests certain information about the user logging in? For example, email address? Is there a list of such fields that can be requested by the website consuming the open id?

phpbb-openid uses Simple Registration, successfully requesting 8 of the 9 fields available (we dropped the postal code) and an avatar (not very useful for any existing providers, but that will change soon). There are also plans for introducing an Attribute Exchange extension, which has all those and many more.

I think it's best for you to just log into our demo board and see for yourself...

Edit: Updated the AX types link.

[NT]

Victor has just added OpenId support to the development branch of mantisbt.

Not only does it support OpenId providers, but it also supports Google,Yahoo and AOL accounts - marvelous.

NT

[osarrat]

Hello to everyone,

Thanks for the work done on OpenId, but it seems that the OpenId support has been developed, but not on the trunk. Neither the 1.2.3 nor the 1.2.a3 versions had the openid_login.php page included.

How could I use OpenId with version 1.2.3?

Best,

Olivier.

[atrol]

You are right, see also
http://www.mantisbt.org/forums/viewtopic.php?f=2&t=8130
You should mail to the MantisBT developer list and ask why this has not been merged to main trunk
This issues says that Open ID is available with version 1.2.0a3, but it is not available with any official 1.2.x or 1.3.x version
http://www.mantisbt.org/bugs/view.php?id=8199
It's just available as commit at this branch http://git.mantisbt.org/?p=mantisbt.git ... f0458322f5

[osarrat]

Thanks atrol for your reply.

Finally, I've posted a message on mantisbt-dev with a little work I've done to adapt vboctor code to the 1.2.3 version :
http://sourceforge.net/mailarchive/mess ... .gmail.com

Best,

Olivier.

[atrol]

Thanks for contributing to MantisBT
I reopened the issue and attached your patch.
I hope that Victor will find the time to review the code and commit to branches master and master-1.2.x
You should add yourself to the monitoring list of http://www.mantisbt.org/bugs/view.php?id=8199